Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "Grace Chung 鍾素美" <gracec@waveplus.com.tw>
To: netfilter@lists.netfilter.org
Subject: Virtual services cannot been reached from the LAN side
Date: Fri, 11 Mar 2005 17:34:48 +0800	[thread overview]
Message-ID: <000c01c5261d$92448bc0$3ca8a8c0@gracec> (raw)

Hi everyone,

I have a FTP server on LAN side (192.168. 1.210), and a local host PC A(192.168.1.2).
My gateway has two interface,  eth0 (10.1.1.1) and eth1 (192.168.1.1).

I configure NAT as:
    iptables -t nat -A POSTROUTING -o  eth0 -j MASQUERADE
    iptables -t nat -A PREROUTING -p tcp -d 10.1.1.1 --dport 21 -j DNAT --to-destination 192.168.1.210
    iptabled -t nat -A POSTROUTING -p tcp --dport 21 -j SNAT --to_source 192.168.1.1

PC A try to connect to FTP server using : ftp 10.1.1.1
I monitor the traffic on the LAN 
    192.168.1.2     ->10.1.1.1             TCP SYN
    10.1.1.1            ->192.168.1.210     TCP SYN
    192.168.1.210    ->10.1.1.1         TCP SYN ACK
    192.168.1.1        ->192.168.1.2     TCP SYN ACK    <- should 10.1.1.1 ->192.168.1.2
    192.168.1.2        ->192.168.1.1    TCP RST

What rules do I apply it? Does anyone can help me? Thanks!

Grace



             reply	other threads:[~2005-03-11  9:34 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-03-11  9:34 Grace Chung 鍾素美 [this message]
2005-03-11 14:20 ` Virtual services cannot been reached from the LAN side Jörg Harmuth

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='000c01c5261d$92448bc0$3ca8a8c0@gracec' \
    --to=gracec@waveplus.com.tw \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox